I see that AVTP control frames are not being decoded even-though cd bit in the header field is 1. Wire shark always decodes AVTP packet with ether-type = 0x22F0 and cd = 1 as AVTP data frames. Is this expected behavior in wire shark?
I am using wireshark Version: 1.12.2
If the latest version of Wireshark is incorrectly dissecting AVTP frames, please file a bug on the Wireshark Bugzilla, and, if possible, attach a sample capture that shows the problem.
Asked: 2018-02-27 20:33:00 +0000
Seen: 579 times
Last updated: Feb 28 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
On further analysis i see that wireshark takes the subtype field of AVTP packet as 8 bits, but as per IEEE1722 spec it is 7 bits. CD bit is getting merged in to subtype field in wireshark, hence control frames are not decoded.
Note:I tried this on the latest version of wireshark:Version 2.4.5